diff --git a/lib/classes/JsonApi/Routes/Courseware/Authority.php b/lib/classes/JsonApi/Routes/Courseware/Authority.php index 0f50b487463819683ebab992515243de59ca16c9..fa84c0a0cd62894f772af6591c4764323ddc5c75 100755 --- a/lib/classes/JsonApi/Routes/Courseware/Authority.php +++ b/lib/classes/JsonApi/Routes/Courseware/Authority.php @@ -56,13 +56,19 @@ class Authority public static function canUpdateBlock(User $user, Block $resource) { if ($resource->isBlocked()) { + $structural_element = $resource->container->structural_element; + + if ($structural_element->range_type === 'user') { + return $structural_element->range_id === $user->id; + } + $perm = $GLOBALS['perm']->have_studip_perm( - $resource->container->structural_element->course->config->COURSEWARE_EDITING_PERMISSION, - $resource->container->structural_element->course->id, + $structural_element->course->config->COURSEWARE_EDITING_PERMISSION, + $structural_element->course->id, $user->id ); - return $resource->getBlockerUserId() == $user->id || $perm; + return $resource->edit_blocker_id === $user->id || $perm; } return self::canUpdateContainer($user, $resource->container);